Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File:                     31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier:          NoLVvbWuibXWndWWR+SXYiy5OiORX51IkOH1MdGQ+vY=
Subject key identifier:   42:38:20:A7:DA:30:36:E4:98:4C:D6:80:B6:23:54:93:4F:7A:8A:0F
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer:       /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number:          015C
Signing time:             Sun 03 Aug 2025 04:32:31 +0000
Manifest this update:     Sun 03 Aug 2025 04:32:31 +0000
Manifest next update:     Sun 10 Aug 2025 04:32:31 +0000
Files and hashes:         1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: SO/Dmj8XilbzEDG1WCfG4y1MmY+InJ8RpGLmKsUO3Js=)
                          2: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: J8+lxSFWmAdItoP7AGJ9n1czEhUKmEFacTRv8zqHb88=)
                          3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: mZ/f/kYNljSI/Y1NgwFenBb3960hqwOok7c22vWxduM=)
                          4: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: LjDyklpsY4tER3qyvIF/MVWeA44K8qWvTHC+14bUFS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 04:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
        Validity
            Not Before: Aug  3 04:32:31 2025 GMT
            Not After : Aug 10 04:32:31 2025 GMT
        Subject: CN=688ee65f-1df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:7a:a5:47:ec:3b:07:55:67:fd:f3:ca:27:
                    f9:f8:a4:3c:58:8b:27:7e:36:44:54:50:d6:08:20:
                    e5:81:ce:ab:ad:fb:f2:d9:12:44:68:57:b4:ec:58:
                    37:09:9e:95:09:d6:1c:a5:ea:7d:54:13:ec:5f:02:
                    6f:e8:14:3e:da:6f:04:c5:1f:72:32:ce:d5:6f:51:
                    d5:f3:88:52:92:00:4d:45:18:c0:c4:77:18:11:f5:
                    5d:f6:38:56:01:b2:8b:04:5d:0f:45:9b:50:db:7a:
                    e1:f9:22:f8:5d:e3:b9:73:d1:20:db:f0:38:1e:ad:
                    43:74:9d:03:c0:d0:f3:36:d4:36:c4:87:8e:d5:e9:
                    fc:58:01:d5:7e:fa:69:9e:e0:ab:ed:92:8d:cf:e8:
                    d4:b2:43:b8:54:4b:75:89:e1:04:e5:a0:12:4e:72:
                    aa:d2:ff:46:ad:39:78:9c:1d:3f:92:1b:e5:8f:ab:
                    68:6b:93:24:bc:2a:39:5c:88:59:80:62:35:f6:67:
                    9c:cb:b7:96:45:ea:ff:aa:d2:17:b2:49:3c:e3:ec:
                    e3:72:b6:f6:9e:8d:bc:0d:df:44:71:4f:c4:b2:e7:
                    31:7b:e5:67:e6:0d:87:30:58:af:1f:9d:c6:18:f5:
                    a2:8f:d9:00:95:bd:76:74:31:7e:9b:74:66:20:94:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:38:20:A7:DA:30:36:E4:98:4C:D6:80:B6:23:54:93:4F:7A:8A:0F
            X509v3 Authority Key Identifier:
                keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:ba:37:32:9a:26:9c:39:f3:24:f5:d6:52:4f:5c:d2:f4:75:
         e5:d3:13:76:f0:6e:a9:01:1e:8c:10:bb:6d:1d:2f:4e:7f:30:
         82:74:46:ed:b0:33:f2:c0:55:ba:63:cb:41:25:46:7c:3e:fd:
         26:09:b0:30:76:8a:d5:3f:95:da:66:0d:c1:41:9e:46:5d:92:
         6f:39:7e:cc:7b:1d:db:af:d5:52:7c:38:51:0c:15:ad:70:90:
         06:fa:a9:2b:c9:d0:23:a7:f1:5c:78:dd:af:b0:5a:b8:87:37:
         71:b7:42:ae:95:ab:51:32:f6:cf:c5:17:70:d2:b0:c9:59:3f:
         3e:61:2b:ba:9c:a6:cd:dc:d5:57:70:f4:88:ff:53:e3:c6:61:
         a5:86:be:b9:eb:46:fc:ef:63:18:72:e7:e5:cf:f7:9e:05:12:
         ba:cf:5d:4d:b2:67:b3:a7:1b:e3:41:bf:07:22:6d:33:56:2d:
         c9:d6:e7:e8:37:7b:c5:a9:0d:fa:e6:a2:22:b8:20:31:a1:49:
         d9:e3:5b:a1:8b:ad:32:9f:8a:cf:57:94:75:95:8e:1b:ef:dc:
         51:9a:54:83:a2:f3:f8:4d:93:72:09:e2:9f:77:19:a7:1a:41:
         bc:2b:c9:47:5e:ff:56:f9:e0:2f:70:40:55:bf:79:4a:31:9d:
         d2:76:cf:5e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI3RTkxMTAvBgNVBAUTKERGNTE0NzBCMTVFOEMxNDFBRjJGQTg0NkEyOEMwM0Iz
ODU5MUJBQjQwHhcNMjUwODAzMDQzMjMxWhcNMjUwODEwMDQzMjMxWjAYMRYwFAYD
VQQDEw02ODhlZTY1Zi0xZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlAV6pUfsOwdVZ/3zyif5+KQ8WIsnfjZEVFDWCCDlgc6rrfvy2RJEaFe07Fg3
CZ6VCdYcpep9VBPsXwJv6BQ+2m8ExR9yMs7Vb1HV84hSkgBNRRjAxHcYEfVd9jhW
AbKLBF0PRZtQ23rh+SL4XeO5c9Eg2/A4Hq1DdJ0DwNDzNtQ2xIeO1en8WAHVfvpp
nuCr7ZKNz+jUskO4VEt1ieEE5aASTnKq0v9GrTl4nB0/khvlj6toa5MkvCo5XIhZ
gGI19mecy7eWRer/qtIXskk84+zjcrb2no28Dd9EcU/Esucxe+Vn5g2HMFivH53G
GPWij9kAlb12dDF+m3RmIJRaQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI4IKfa
MDbkmEzWgLYjVJNPeooPMB8GA1UdIwQYMBaAFN9RRwsV6MFBry+oRqKMA7OFkbq0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FOTlFN0Y1MjZF
MkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dVR3ZMNmhHb293RHM0V1J1
clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMxRkhDeFhvd1VHdkw2aEdvb3dEczRXUnVyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjdFOS9FOTlFN0Y1MjZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dV
R3ZMNmhHb293RHM0V1J1clEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAujcymiacOfMk9dZST1zS9HXl0xN28G6pAR6MELttHS9OfzCCdEbt
sDPywFW6Y8tBJUZ8Pv0mCbAwdorVP5XaZg3BQZ5GXZJvOX7Mex3br9VSfDhRDBWt
cJAG+qkrydAjp/FceN2vsFq4hzdxt0KulatRMvbPxRdw0rDJWT8+YSu6nKbN3NVX
cPSI/1PjxmGlhr6560b872MYcuflz/eeBRK6z11NsmezpxvjQb8HIm0zVi3J1ufo
N3vFqQ365qIiuCAxoUnZ41uhi60yn4rPV5R1lY4b79xRmlSDovP4TZNyCeKfdxmn
GkG8K8lHXv9W+eAvcEBVv3lKMZ3Sds9e
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:00 2025 by rpki-client